CDK Global - Cloud Network Engineer - DNS Management & Configuration

Job Description :

We are seeking a Cloud Network Engineer with hands-on DNS expertise to design, implement, and operate cloud networking solutions across hybrid environments. This role combines core cloud networking (routing, connectivity, security) with a strong emphasis on enterprise DNS architecture, name resolution, and traffic management.

The ideal candidate brings practical experience managing DNS in AWS and Azure, alongside solid networking fundamentals, and can support scalable, highly available, and secure infrastructure.

Responsibilities :

Cloud Network Engineering :

- Design and manage cloud networking components :

1. AWS VPC / Azure VNet

2. Subnets, route tables, gateways

- Implement hybrid connectivity :

1. Site-to-site VPN

2. Client VPN

3. Exposure to ExpressRoute / Direct Connect

Routing & Connectivity Management :

- Configure and maintain :

1. Route tables (static + dynamic)

2. Basic BGP configurations (under guidance)

- Support traffic flow optimization and routing decisions.

- Troubleshoot routing issues :

1. Connectivity failures

2. Misconfigured routes

3. Latency or asymmetric routing

DNS Management and Configuration :

- Manage DNS zones, records, and configurations to ensure proper domain resolution and minimize downtime

- Implement DNS security best practices, such as DNSSEC, to protect DNS infrastructure.

Automation & IaC :

- Migrate the current Infrastructure code for DNS records to Terraform

- Utilizing CI/CD methodology, ensure changes are implemented via pipelines and can eaasily backout

- Enable self-service DNS change management using IaC and CI/CD automation

- Assist with automation of network provisioning and configuration.

- Maintain version-controlled network configurations.

Operations & Monitoring :

- Monitor network/DNS health using cloud-native tools :

1. Azure Monitor, AWS CloudWatch

- Investigate and resolve Level 2 network incidents.

- Participate in on-call rotation (if applicable).

Security & Network Segmentation :

- Implement and maintain :

1. NSGs / Security Groups

2. Network ACLs

- Assist in enforcing segmentation and least-privilege access.

- Support secure connectivity patterns (private endpoints, service endpoints).

Documentation & Continuous Improvement :

- Maintain network diagrams and configuration documentation.

- Develop and maintain runbooks for Cloud Network-related operations and incident response.

- Identify opportunities for :

1. Performance improvement

2. Cost optimization (e.g., NAT gateway usage, egress traffic)

- Contribute to standardization of network design patterns.

Qualifications :

- Solid understanding of TCP/IP, DNS, routing fundamentals, Subnetting and CIDR

- In-depth knowledge of DNS, DNSSEC, and BIND.

- Experience with cloud-based DNS services such as AWS Route 53 and Azure DNS

- Knowledge of Linux Bind servers and Windows DNS

- Hands-on experience with at least one cloud platform : AWS or Azure

- Familiarity with Infrastructure as Code (IaC) tools like Terraform, and Ansible.

- Strong troubleshooting and analytical thinking

- Ability to work independently on standard tasks

- Scripting/automation mindset

- Excellent communication and documentation skills.

Preferred Qualifications :

- Experience with :

1. Hybrid cloud networking (on-prem to AWS/Azure)

2. VPN configurations and troubleshooting

- Exposure to :

1. BGP routing concepts

2. Load balancing

3. AD-DNS, Route 53, Azure DNS

4. Linux, Bind and SVN

- Certifications (or in progress) :

1. AWS Solutions Architect Associate

2. Azure Administrator (AZ-104) or AZ-700

3. CCNA